eSecurity Planet

MAY 5, 2025

A notorious hacker group known as Golden Chickens is back in the spotlight after cybersecurity researchers discovered two new digital weapons designed to steal passwords, watch every word you type, and target your cryptocurrency. A familiar name behind major hacks Golden Chickens has been active since at least 2018.

Passwords 67

Passwords Malware Cryptocurrency Cybercrime 67

Schneier on Security

MARCH 15, 2019

Here's the first, in footnote 1: We understand the word "password" to be synonymous with other terms that cell phone users may be familiar with, such as Personal Identification Number or "passcode." For simplicity, we use "password" throughout. See generally, Kerr & Schneier, Encryption Workarounds, 106 Geo.

Encryption 165

Encryption Passwords Technology 165

Krebs on Security

MARCH 31, 2020

The attacker also obtained free encryption certificates for escrow.com from Let’s Encrypt. In cases where passwords are used, pick unique passwords and consider password managers. 49 (that domain is hobbled here because it is currently flagged as hosting a phishing site).

Phishing 345

Phishing DNS Social Engineering Accountability 345

Security Affairs

SEPTEMBER 9, 2022

Iran-linked APT group DEV-0270 (aka Nemesis Kitten) is abusing the BitLocker Windows feature to encrypt victims’ devices. Microsoft Security Threat Intelligence researchers reported that Iran-linked APT group DEV-0270 ( Nemesis Kitten ) has been abusing the BitLocker Windows feature to encrypt victims’ devices.

Encryption 142

Encryption Internet Internet Firewall 142

Security Affairs

JUNE 8, 2021

Trojan Shield operation: The FBI and Australian Federal Police ran an encrypted chat platform that was used by crime gangs and intercepted their communications. The FBI and Australian Federal Police (AFP) ran an encrypted chat platform that was used by crime gangs and intercepted their communications.

Encryption 136

Encryption Cryptocurrency Cybercrime Advertising 136

Malwarebytes

MAY 1, 2025

These messages frequently warn recipients about a problem with their accounts, like a password that needs to be updated, a policy change that requires a login, or a delayed package that has to be approved. In reality, those usernames and passwords are delivered directly to cybercriminals on the other side of the website.

Small Business 101

Small Business Cybersecurity Scams Passwords 101

eSecurity Planet

DECEMBER 7, 2023

Encryption uses mathematical algorithms to transform and encode data so that only authorized parties can access it. What Encryption Is and How It Relates to Cryptology The science of cryptography studies codes, how to create them, and how to solve them. How Does Encryption Process Data? How Does Encryption Process Data?

Encryption 113

Encryption Passwords IoT Firewall 113

Security Affairs

MARCH 11, 2019

Experts observed the STOP ransomware installing the Azorult password-stealing Trojan to steal account credentials, cryptocurrency wallets, and more. The STOP ransomware made the headlines because it is installing password-stealing Trojans on the victims’ machines. ” reads a blog post published by Bleepingcomputer.

Encryption 109

Encryption Ransomware Cryptocurrency Passwords 109

Troy Hunt

MARCH 27, 2018

It began with a visit to the local Telstra store earlier this month to upgrade a couple of phone plans which resulted in me sitting alone by this screen whilst the Telstra staffer disappeared into the back room for a few minutes: Is it normal for @Telstra to display customer passwords on publicly facing terminals in their stores?

Passwords 196

Passwords Banking Mobile Telecommunications 196

SecureWorld News

JUNE 9, 2025

Much of the industry still relies on legacy operational tech (OT) systems that lack modern security features such as automated patch management and encryption by default. In 2018, Cathay Pacific suffered what remains one of the most serious data breaches in airline history, compromising the personal information of up to 9.4

Cybersecurity 118

Cybersecurity Social Engineering Computers and Electronics Risk 118

Krebs on Security

SEPTEMBER 17, 2018

In January 2018, GovPayNet was acquired by Securus Technologies , a Carrollton, Texas- based company that provides telecommunications services to prisons and helps law enforcement personnel keep tabs on mobile devices used by former inmates. Although its name may suggest otherwise, Securus does not have a great track record in securing data.

Mobile 278

Mobile Government Identity Theft Telecommunications 278

Security Affairs

AUGUST 3, 2019

Dragonblood researchers found two new weaknesses in WPA3 protocol that could be exploited to hack WPA3 protected WiFi passwords. passwords. A group of researchers known as Dragonblood (Mathy Vanhoef and Eyal Ronen ) devised new methods to hack WPA3 protected WiFi passwords by exploiting two new vulnerabilities dubbed Dragonblood flaws.

Passwords 111

Passwords Hacking Wireless Authentication 111

The Last Watchdog

JUNE 21, 2020

Although most people think of ransomware as a dodgy application that encrypts data and holds it for ransom, the concept is much more heterogeneous than that. The Archiveus Trojan from 2006 was the first one to use RSA cipher, but it was reminiscent of a proof of concept and used a static 30-digit decryption password that was shortly cracked.

Ransomware 243

Ransomware Hacking Encryption Penetration Testing 243

Troy Hunt

JUNE 25, 2018

thanks @troyhunt for the excellent @haveibeenpwned service that notifies users of #privacy disasters like this :) [link] pic.twitter.com/jlqnKXteDG — Yale Privacy Lab (@YalePrivacyLab) June 4, 2018. I at least know about it, thx to @haveibeenpwned — Tim Plas (@TJPlas) June 3, 2018. ticketfly a heads up would have been nice.

Passwords 279

Passwords Data breaches Password Management Accountability 279

Security Affairs

MAY 22, 2019

Google accidentally stored the passwords of its G Suite users in plain-text for 14 years allowing its employees to access them. The news is disconcerting, Google has accidentally stored the passwords of the G Suite users in plain-text for 14 years, this means that every employee in the company was able to access them.

Passwords 108

Passwords Encryption Advertising Accountability 108

Troy Hunt

JANUARY 10, 2018

agarwal_mohit) January 5, 2018. I think the URL is right but it seems inaccessible from other countries: [link] — Troy Hunt (@troyhunt) January 9, 2018. Security /= George blocking — Vatsalya Goel (@vatsalyagoel) January 9, 2018. — Khas Mek (@KhasMek) January 10, 2018. FergusInLondon) January 10, 2018.

Hacking 280

Hacking Government Encryption InfoSec 280

Adam Levin

AUGUST 31, 2018

Air Canada is advising customers to reset their passwords on their mobile application after detecting a potential data breach of customer records. million users to reset their passwords. “We 22-24, 2018. “We 22-24, 2018. Million Customers to Reset App Passwords appeared first on Adam Levin.

Data breaches 106

Data breaches Passwords Mobile Encryption 106

SecureList

OCTOBER 29, 2024

In the screenshot below, the stealer file is named 0Setup.exe: Contents of the malicious archive After launching, 0Setup.exe runs the legitimate BitLockerToGo.exe utility, normally responsible for encrypting and viewing the contents of removable drives using BitLocker.

Adware 129

Adware Malware Cryptocurrency Password Management 129

Krebs on Security

FEBRUARY 18, 2019

government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge volumes of email passwords and other sensitive data from multiple governments and private companies. The first domain was “ ns0.idm.net.lb

DNS 279

DNS Internet Internet Government 279

SecureList

DECEMBER 23, 2024

Victims get infected via phishing emails containing a malicious document that exploits a vulnerability in the formula editor ( CVE-2018-0802 ) to download and execute malware code. dat Encrypted VBShower backdoor AppCache028732611605321388.log:AppCache0287326116053213889292.vbs See below for the infection pattern.

Encryption 135

Encryption Penetration Testing Malware Phishing 135

Krebs on Security

APRIL 22, 2019

The software is broadly classified as malware by most antivirus companies, likely thanks to an advertised feature list that includes dumping the remote computer’s temporary memory; retrieving passwords from dozens of email programs; snarfing the target’s Wi-Fi credentials; and viewing the target’s Webcam.

Advertising 256

Advertising Antivirus Software Malware 256

Krebs on Security

SEPTEMBER 30, 2023

The government says Snatch used a customized ransomware variant notable for rebooting Microsoft Windows devices into Safe Mode — enabling the ransomware to circumvent detection by antivirus or endpoint protection — and then encrypting files when few services are running. Details after contacting on jabber: truniger@xmpp[.]jp.”

Ransomware 294

Ransomware Accountability Cybercrime Backups 294

Krebs on Security

FEBRUARY 23, 2019

19, Apex was alerted that its systems had been infected with a destructive strain of ransomware that encrypts computer files and demands payment for a digital key needed to unscramble the data. “When they encrypt the data, that happens really fast,” he said. Roswell, Ga. on Tuesday, Feb. More than a week later on Jan.

Ransomware 273

Ransomware Backups Encryption Internet 273

Krebs on Security

NOVEMBER 21, 2018

It does not appear USPS account passwords were exposed via this API, although KrebsOnSecurity conducted only a very brief and limited review of the API’s rather broad functionality before reporting the issue to the USPS. . “It should have been protected via authentication and validated against the logged in user in question.”

Accountability 279

Accountability Authentication Identity Theft Advertising 279

Troy Hunt

APRIL 17, 2018

link] — Nodestack (@NodestackUK) April 12, 2018. In the case above, HostGator was being taken to task for storing passwords in a retrievable fashion (i.e. gdlinux — Guardian Digital (@gdlinux) April 13, 2018. — Jason Snelders (@JasonSnelders) April 12, 2018. I'll come back to that.

Media 246

Media Advertising Accountability Marketing 246

Security Affairs

OCTOBER 23, 2018

The flaw affects the process implemented by the Signal Desktop application to encrypt locally stored messages. Signal Desktop application leverages an encrypted SQLite database called db.sqlite to store the user’s messages. The encryption key is used each time Signal Desktop application accessed the database.

Encryption 111

Encryption Passwords Advertising Engineering 111

SecureList

OCTOBER 7, 2021

This ransomware became active at the back end of 2018 and remains current. According to our data, its main vector of distribution is cracking RDP passwords. Encrypted files and a note from the attackers. The malware encrypts files using the AES-256 algorithm in CBC mode. Ransomware families at a glance. BigBobRoss/TheDMR.

Ransomware 144

Ransomware Encryption Passwords Malware 144

Security Affairs

SEPTEMBER 2, 2019

Earlier in August, Poshmark , a social commerce marketplace where people in the United States can buy and sell new or used clothing, shoes, and accessories, disclosed a data breach that took place in May 2018. “In mid-2018, social commerce marketplace Poshmark suffered a data breach that exposed 36M user accounts.

Accountability 108

Accountability Data breaches Passwords Surveillance 108

Security Affairs

JUNE 11, 2021

million Windows systems between 2018 and 2020. The software includes illegal Adobe Photoshop 2018, a Windows cracking tool, and several cracked games.” Most of the stolen files (50%+) were text files, some of them containing software logs, passwords, personal notes, and other sensitive information. terabyte of stolen data.

Malware 131

Malware Computers and Electronics Software Financial Services 131

Security Affairs

NOVEMBER 9, 2018

Guy Fawkes Day, November 5th 2018 – LulzSec Italy announced credit a string of hacks and leaks targeting numerous systems and websites across Italy. In celebration of Guy Fawkes Day, November 5th 2018, LulzSec Italy announced credit for a massive string of hacks and leaks targeting numerous systems and websites across Italy.

Passwords 111

Passwords Education Advertising Media 111

Webroot

APRIL 5, 2024

From 2018 to 2023, healthcare data breaches have increased by 93 percent. Memorial Hermann balances user experience with encryption Email encryption keeps sensitive medical data safe and organizations compliant. Unfortunately, providers will skip it if the encryption tool is difficult to use. Read the full case study.

Healthcare 126

Healthcare Data breaches Encryption Ransomware 126

Krebs on Security

JULY 3, 2023

In January 2019, Houzz acknowledged that a data breach exposed account information on an undisclosed number of customers, including user IDs, one-way encrypted passwords, IP addresses, city and ZIP codes, as well as Facebook information. In 2018, KrebsOnSecurity published How Internet Savvy are Your Leaders? 68.35.149.206).

Scams 297

Scams Business Services Accountability Marketing 297

Krebs on Security

AUGUST 23, 2024

Meaning, they are continuously sending their Windows usernames and passwords to domain names they do not control and which are freely available for anyone to register. Alas, in 2018, the.llc TLD was born and began selling domains. Caturegli said many organizations no doubt viewed a domain ending in.ad He then learned the.ad

DNS 329

DNS Internet Internet Authentication 329

Malwarebytes

JANUARY 3, 2023

The password management company LastPasss notified customers in late December about a recent security incident. LastPass states that users that followed their best password practices have nothing to worry about. It is recommended that you never reuse your master password on other websites. It also generates strong passwords.

Password Management 98

Password Management Passwords Encryption Accountability 98

Krebs on Security

OCTOBER 21, 2019

Antivirus and security giant Avast and virtual private networking (VPN) software provider NordVPN each today disclosed months-long network intrusions that — while otherwise unrelated — shared a common cause: Forgotten or unknown user accounts that granted remote access to internal systems with little more than a password.

Accountability 175

Accountability VPN Software Antivirus 175

Security Affairs

JANUARY 8, 2021

“The loader decrypts the malicious malware and executes it using memfd create (as described in this blog in 2018). Upon executing the code, it will ask the user the path for the payload to be encrypted and the password to be used for AES encryption to hide the malware within the loader.

Malware 145

Malware Encryption Antivirus Passwords 145

Malwarebytes

MAY 28, 2021

The files are then held for ransom and the victim is threatened by data loss, because of the encryption, and leaking of the exfiltrated data. Files are encrypted with a combination of AES-256 and RSA-4096 via the Microsoft CryptoAPI , as per CrowdStrike. Earlier versions appended the.CONTI extension to encrypted files.

Healthcare 138

Healthcare Ransomware Encryption Passwords 138